use IRC to give it commands and see logs so vpn is not always on (i.e: when you want vpn, you tell it to connect to an external IP, perhaps spin up a vm for tha

use IRC to give it commands and see logs so vpn is not always on (i.e: when you want vpn, you tell it to connect to an external IP, perhaps spin up a vm for that). Don't expose it directly as it would be easy to flood it into submission in addition to it being insecure. Once connected - use it to tunnel traffic back to network. Anything else would work though (telegram/cloudflare tunnels/...), It's just what I would use.